ZoneLog Analyser reads and displays the log file generated by ZoneLabs' ZoneAlarm and ZoneAlarm Pro personal firewall, entries in the log are generated whenever an unauthorised connection is attempted to or from your PC during connection to the Internet. ZoneLog Analyser will attempt to unravel the information that is provided in the ZoneAlarm log file by giving information about the ports used and the ability to 'look up' the intruder's address details.

Features of ZoneLog Analyser 1.19 :

· Imports the ZoneAlarm log into it's own database for speed of operation.·
· Colour coded listing to show severity of known attacks.
· Get full, clear details about each log entry.
· Create reports on specific addresses, ports, time periods, etc.
· Resolve host names for all known IP addresses.
· Link to WHOIS websites or external applications for more detailed info on a particular address.
· Create an email message with details of an attack for reporting attackers to their ISP.
· Tag specific addresses as friend or foe.
· Threat Analysis - picks out the attacks from the noise.
· Submits logs to DShield.org
· Easy to use...


What's New in ZoneLog Analyser 1.19 :

Bug Fixes
· Updated recognition for relabeled FWOUT_OK types.
· Fixed a bug in the SMTP DShield submission that affected some mail servers.
· DShield submission now excludes addresses tagged as Friendly.
· Simplified tracking of unfriendly addresses after import.
· Hopefully fixed remaining '401' errors when doing DNS lookups.
New Features
· Log listings broken down into pages to increase speed and reduce display overflow problems.
· Added new Port database update check which can dynamically update the Port database via the internet whenever new definitions are available.
· Added user definable interval for automated DShield submissions.
· When creating a report from the RAW log for Addresses or Ports returning to the RAW log from the · Report Mode will return to the row that the report was created from.